Hackers Can Open Doors by Exploiting Vulnerabilities in Hörmann Device

guest · Oct 28, 2020

Hackers Can Open Doors by Exploiting Vulnerabilities in Hörmann Device
October 28, 2020
https://www.securityweek.com/hackers-can-open-doors-exploiting-vulnerabilities-hörmann-device

Hörmann is a Germany-based company that specializes in home and industrial doors. The company’s products are sold in more than 50 countries across North America, Europe and Asia, and according to Wikipedia, it’s the fourth largest door manufacturer in the world.

Customers who want to control garage doors, entrance gates and other smart systems from a smartphone are provided the BiSecur gateway device, a wireless access control system that includes a Hörmann key fob and comes with Wi-Fi and Ethernet interfaces.
Click to expand...

Researchers at Austria-based cybersecurity company SEC Consult have discovered a total of 15 vulnerabilities in the gateway device, including issues related to encryption, poorly protected communications, and the associated mobile application.
Based on its research, SEC Consult has created an open source Python-based communication library for BiSecur devices.

SEC Consult says Hoermann has taken steps to address the vulnerabilities after being notified. SecurityWeek has reached out to the vendor for comment and will update this article if it responds.
Click to expand...

This is not the first time researchers have found vulnerabilities in the Hoermann BiSecur device. Back in 2017, experts showed how hackers could have cloned a legitimate transmitter to take control of gates and doors.
Click to expand...

SEC Consult: Hörmann – Opening Doors For Everyone…

1. TLDR;
SEC Consult found that the Hörmann BiSecur Gateway product contained multiple vulnerabilities.

The most serious remote attack allows an attacker to harvest credentials from users operating the product and underlying infrastructure by exploiting a logic flaw in the custom protocol. All registered customers are affected by this vulnerability.

The most serious local attack allows an attacker to hijack the session of any user connected to the device. Its success in a matter of minutes relies on the use of a short session identifier and the absence of session expiration.

An attacker on the local network can open any doors using the BiSecur Gateway system. A remote attacker on the Internet can harvest and acquire all user credentials to open customer doors using the BiSecur Gateway system. The following blog post provides an overview of how the vulnerabilities were identified.
Click to expand...

Log in or Sign up

Hackers Can Open Doors by Exploiting Vulnerabilities in Hörmann Device

guest Guest

Log in or Sign up

Hackers Can Open Doors by Exploiting Vulnerabilities in Hörmann Device

guest Guest

Useful Searches